Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
File: mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer (raw, json)
Hash identifier: qHXPk2tW4885t2CeTpCX5aYZ8cJU9OGW20uhyqGS8FQ=
Subject key identifier: 9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC493933B8D4154A5E984D8E6115CBD69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44744
IP: 2001:678:c68::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:93:3b:8d:41:54:a5:e9:84:d8:e6:11:5c:bd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:6b:53:75:e3:e7:e6:7b:8f:4b:c3:6a:fd:
48:13:df:c4:b4:63:9b:6b:b2:0d:c9:cb:85:21:10:
db:45:76:ed:3f:2e:50:e9:55:96:80:6b:53:cd:b3:
83:0b:6b:86:32:e5:6e:5e:be:5c:3f:19:32:b2:6e:
b8:97:1a:b2:03:c3:3c:96:4d:0a:52:4d:1f:f4:a2:
35:14:f8:de:63:4f:19:d2:81:39:3f:cd:50:38:44:
94:f1:60:bf:8b:46:a1:fd:f0:6e:7c:ac:c7:b3:52:
d9:84:0b:2b:75:e0:a2:cd:6d:c4:91:4b:89:f5:00:
9c:3b:1c:dc:54:df:f4:26:38:b3:1c:39:10:a2:aa:
c8:fb:07:25:0f:84:15:90:27:9c:b2:85:be:14:1d:
17:7b:0d:ae:7b:f6:39:c1:bf:56:1a:53:ec:aa:46:
7f:c5:c8:01:ee:53:47:7f:85:aa:36:60:8b:2b:b9:
31:9f:38:a8:7c:1d:0a:95:50:ec:da:57:33:cd:8a:
17:7c:a1:5e:d7:2b:6a:f7:17:12:58:34:2e:cb:b8:
cf:ed:77:50:f9:86:b6:af:cc:ce:82:6d:8b:00:81:
c2:d1:04:75:cf:50:89:4b:66:3c:6a:22:f2:ab:a6:
5a:2e:32:52:1f:29:62:61:e5:4f:b1:c9:3d:8c:00:
0c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c68::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44744
Signature Algorithm: sha256WithRSAEncryption
90:d1:32:82:53:4d:de:e2:02:81:86:88:97:e1:9a:df:14:cb:
42:fe:5a:72:37:8f:23:c1:47:3e:68:a4:da:28:e8:37:3b:79:
ee:db:4c:d9:9d:bf:e6:4d:2c:9c:20:07:bb:c9:92:8b:c6:72:
f4:23:50:26:f8:72:91:dd:cb:97:ac:7d:5a:20:d1:be:c8:83:
c7:fd:a9:5b:0e:c3:ee:eb:b7:ec:50:9a:e0:4d:a0:4e:81:7b:
44:1f:d1:23:0a:d7:a7:9d:f3:e7:00:be:46:39:44:dc:13:6e:
97:2d:cb:86:76:0b:77:84:76:a8:93:4b:23:c3:25:8d:0c:1e:
81:de:a6:06:a2:44:ab:02:06:1e:91:34:25:5d:8b:ec:bb:36:
e7:c3:74:e1:0e:3d:42:89:23:23:87:81:a8:75:99:e9:f8:1d:
f7:c1:df:d1:9e:9a:38:f8:4c:d9:ec:9b:af:b0:d4:9c:71:16:
ed:6c:2f:4c:d3:ba:59:e6:ab:1a:f9:05:0e:48:aa:26:b0:ae:
8e:f7:22:74:ec:56:e7:68:81:0e:e2:9c:47:79:f2:da:fd:76:
e9:10:f7:5f:97:81:f9:24:d6:9b:da:7c:73:f5:16:48:f0:52:
0d:3d:58:88:04:46:33:ed:38:8e:c1:2c:ae:8e:ce:91:1c:e9:
d1:0d:fb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:35:46 2024 by rpki-client on console-ams.rpki-client.org